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IN THE SPECIFICATION 

[Paragraph beginning page 4, line 19] 

In order to ensure the integrity of the communication channel, the core electronics 
module 24 is connected to the lock 30 via a secure link 52 33. This secure link 52 33 
includes an encryptor that is implemented in the core electronics 24, some form of cable 34 
and a decryptor 36 that resides within the safe 26. All control signals sent to the lock 30 from 
the core module 24 are encrypted and passed to the decryptor 36. Hence, even although the 
processing core 24 is placed outside the safe 26, there is no associated security risk. No one 
tapping the signals from the core 24 would be able to break into the line 52 33 and mimic the 
signals needed to open the lock. 

[Two Paragraphs beginning page 6, line 8] 

In order to provide additional security, a detector 38 may be provided in association 
with the lock 30 and/or the door 28 of the safe 26 for detecting tampering with the safe 26. 
The detector 38 is connected to the core module 24 via the secure link 53 33 and is operable 
to send an alarm signal thereto when tampering is detected. In this case, it should be noted 
that a safe encryptor is provided for encrypting messages from the detector 38 to the core 24. 
This could be provided separately or as part of the safe decryptor module 36. In the event 
that tampering is detected, the detector 38 is operable to generate an alarm signal. This is 
sent to the safe encryptor, where it is encrypted and forwarded to the core processor 24. Once 
received at the core 24, the signal is decrypted and recognized as being an alarm. The core 24 
may then activate an audible alarm. Alternatively, when the ATM 10 is networked, the core 
24 may generate an alarm signal and send it to the remote server 32, where appropriate action 
can be taken. In this way, the system can be adapted to provide a so-called silent alarm. 

As a further security measure, a spoiler mechanism 40 may be provided. This is 
adapted to cause damage to the contents of the safe 26 in the event that tampering is detected. 
The spoiler mechanism 40 may be operable to spray fluid over the contents of the safe 26. 
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The fluid may be such as to render the contents of the secure enclosure unusable. For 
example, the fluid may be paint. The spoiler mechanism 40 may be actuatable in response to 
a control command sent over the secure link 53 33 from the core module 24. Alternatively, 
the control command may be generated by the detector 38 and sent directly to the spoiler 
mechanism 40. 
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